CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit()
In the Linux kernel, the following vulnerability has been resolved:
ipv6: prevent possible UAF in ip6xmit()
If skbexpandhead() returns NULL, skb has been freed and the associated dst/idev could also have been freed.
We must use rcureadlock() to prevent a possible UAF.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44985?
The severity of CVE-2024-44985 is classified as high due to its potential to cause a use-after-free condition in the Linux kernel.
How do I fix CVE-2024-44985?
To fix CVE-2024-44985, you should upgrade to the patched version of the Linux kernel listed in the vulnerability details.
What versions of the Linux kernel are affected by CVE-2024-44985?
CVE-2024-44985 affects several versions of the Linux kernel, specifically versions prior to 5.15.166, between 5.16 and 6.1.107, and several others within particular ranges.
Is CVE-2024-44985 exploitable remotely?
CVE-2024-44985 may be exploitable remotely if the Linux kernel is handling IPv6 traffic under certain conditions.
What is the potential impact of CVE-2024-44985?
The potential impact of CVE-2024-44985 includes system crashes, arbitrary code execution, and loss of data integrity due to the use-after-free vulnerability.